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Abstract 

Grover's search algorithm is designed to be executed on a quantum mechanical computer. 
In this paper, the probabilistic uip-calculus is used to model and reason about Grover's al- 
gorithm. It is demonstrated that the calculus provides a rigorous programming notation for 
modelling this and other quantum algorithms and that it also provides a systematic framework 
of analysing such algorithms. 



1 Introduction 



Quantum computers are a proposed means of using quantum mechanical effects to achieve effi- 
cient computation. Quantum mechanical systems may be in superpositions of several different 
states simultaneously. The central idea of quantum computers is to perform operations on these 
superposed states simultaneously and thus achieve a form of parallel computation. These devices 



were proposed in the early 1980's [Bcnioff, 198C, Dcutsch, 1985 



One essential phenomenon of quantum mechanics is that the measurement of a superposed 
system forces it into a single classical state. Each superposed state is present with a certain 
amplitude and an observation causes it to collapse to that state with a probability that depends 
on its amplitude. This means that, although many computations may be performed in parallel 
on a quantum device, the result of only one of these may be observed. This may seem like a 
severe limitation, but several ingenious algorithms have been devised which work by increasing 
the amplitude of the desired outcome before any observation is performed and thus increasing the 
likelihood of the observed outcome being the desired one. 

One such algorithm is Grover's quantum search algorithm |Grover, 1997| which performs a 
search on an unstructured search space of size N in 0(^/N) steps. To find the desired search 
value with 100% probability in such a space, a classical computer cannot do better than a linear 
time search. Grover's algorithm performs operations on a superposition of all possible search values 
that serve to increase the amplitude of the desired search value. Grover shows that within 0(\/N) 
steps there is a greater than 50% chance of finding the desired search value. [ Boyer et al., 199£| 
proved a stronger result for the algorithm showing that the correct search value can be found in 
0(VN) with almost 100% probability. 



In this paper, we apply the probabilistic weakest-precondition (wp) calculus of [Morgan et al., 1996 
to Grover's algorithm to redevelop the result of [ Boyer et al., 199§| in a more systematic way. The 
probabilistic wp-calcuhis is an extension of Dijkstra's standard iwp-calculus [Dijkstra, 1976 1 devel- 
oped for reasoning about the correctness of imperative programs. The extension supports reasoning 
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about programs containing probabilistic choice. The measurement of a quantum superposition is 
an example of a probabilistic choice. 

Use of the probabilistic wp-calculus contributes two essential ingredients to the analysis of 
quantum algorithms. Firstly it provides an elegant and rigorous programming language for de- 
scribing quantum algorithms. The existing literature uses block diagrams and structured English 
which can be cumbersome and potentially ambiguous. Secondly, the probabilistic wp-calculus 
provides a set of rules for the systematic analysis of the correctness of algorithms. In the case 
of standard algorithms, the calculus is used to determine whether a program achieves some de- 
sired outcome. In the case of probabilistic algorithms, the calculus is used to reason about the 
probability of a program achieving some desired outcome. 

This paper is not simply about re-presenting a known result about Grover's algorithm but 
it also aims to demonstrate that the probabilistic wp-calcuhis is suitable for both modelling and 
reasoning about a quantum algorithm. Boyer et al have already derived the same result that we 
derive here but they do so in a less systematic way. Our hope is that the approach used here 
could be applied fruitfully to other quantum algorithms and may even aid the development of new 
quantum algorithms. 

The paper is organised as follows. In Section^, we give a sufficient overview of quantum theory. 
In Section [|, we present our approach to modelling quantum computation using the programming 
language of the probabilistic wp-calculus. In Section ^, we present Grover's algorithm using the 
approach of Section |^. In Section g, we give a sufficient introduction to the rules of the probabilistic 
wp-calculus and in Section g, we use the wp-calculus to derive a formula for the probability of 
success of Grover's algorithm. 



2 Quantum Systems and Qubits 

In quantum mechanics, a superposition of two states A and B is represented in Dirac's notation 
as follows: 



S = a\A) + p\B). 

System S is said to be in a superposition of A and B. \A) and \B) are the basis states and a and 
(3 are amplitudes. The amplitudes may be complex numbers. 

Let ||z|| 2 be the square norrnQ of complex number z. Observation of S will cause the system 
to collapse to state \A) with probability ||a|| 2 and to \B) with probability ||/3|| 2 . The probabilities 
must sum to 1: 

IMI 2 + iPf = I- 

A qubit is a two state quantum system in which the basis states are labelled and 1: 

S = a|0) + 

A classical bit has a = 1 and j3 = or a = and (3=1. 

A qubit evolves from one superposition to another using a quantum gate (or function) F: 

F( a\0) + 0\1) ) = a'|0) + 

F must be unitary which means that 

• probabilities are preserved: ||a'|| 2 + ||/3'|| 2 = ||a|| 2 + ||/?| 2 , and 

• F has an inverse. 

1 The square norm of any complex number a + bj is a 2 + b 2 . 
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In quantum mechanics, a transformation F is usually modelled using matrix multiplication: 



F( a\0) + 0\1) 



U F x 



where Up is a 2 x 2 unitary matrix. Matrix U is unitary if U.W — W .U — I where is the 
conjugate transpose of U. It can be shown that such a transformation defined by unitary matrix 
Up is unitary [Bernstein and Vazirani, 1993 1. 

A quantum superposition may have an arbitrary number of basis states, not just two. An 
iV-state superposition is represented as: 



E 

i=0 



aM 



Observation of S will cause it to collapse to state \i) with probability ||q;,J 2 . Again, the 
probabilities must sum to 1: 



N-l 

Ei 

i=0 



a; 



A quantum register is a collection of qubits and an L-qubit register gives rise to a system with 
2 L basis states. Like qubits, quantum registers evolve under unitary transformations. 



For further details on quantum computation, the reader is referred to papers such as [Berthiaume, 1996 
Ekert, 1994fl. 



3 Modelling Quantum Computers 

A quantum computer is a collection of quantum registers and quantum gates. In this section, 
we introduce ways of modelling various aspects of quantum computation using the programming 
language of the probabilistic wp-calculus. We use a subset of the language which includes standard 
assignment, probabilistic assignment, sequential composition and simple loops. 

Firstly, we model an TV-state quantum system as a function from state indices to complex 
numbers: S : (0..N - 1) -> C. 

A superposition of the form 

N—i 

E a ^ 

i=Q 

is modelled by the function S where for < i < N: 

S(i) = Qij. 

A classical state i is modelled by the function which is zero everywhere except at i which we 
write as \i): 

\i)U) = 1, if i=j 

— 0, otherwise. 

Transformation of a quantum state is modelled by a standard assignment statement: 

3 := F(S). 

F must be unitary for this to be a valid quantum transformation. 

We shall find it convenient to use lambda abstraction to represent transformations: (\i | < 
i < N ■ E) represents the function that takes an argument i in the range 0..N — 1 and returns the 
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value E. For example, the unitary transformation that inverts the amplitude of each basis state 
is modelled as follows: 

S := (Xi\0<i <N--S(i) ). 

Sequencing of transformations is modelled using sequential composition: let T\ and T<i be 
transformations, then their sequential composition is written Ti;T 2 . 

The loop which iterates C times over a transformation T is written do C times T od. 

We model the observation of a quantum system using a probabilistic assignment statement. In 
the simple case, this is a statement of the form: 

x := E @ p, 

F @ {l-p). 

This says that x takes the value E with probability p and the value F with probability 1 — p. For 
example, a coin flip is modelled by 

coin := head @ 0.5, 
tail @ 0.5. 

Observation of a two state superposition forces the system into a classical state. This is 
modelled with the following probabilistic assignment: 

S := |0) @ ||S(0)|| 2 , 
|1> @ \\S(1)\\ 2 . 

A generalised probabilistic statement has the form 

x := Ei @ p h < i < N, 

where (X^Lo* Pi) = L 

Now observation of an iV-state quantum system S may be modelled by 

S := \i) @ |5(i)| 2 , < i < N. 

That is, S collapses to the classical state i with probability ||5(i)|| 2 . 



4 Grover's Search Algorithm 

The Grover search problem may be stated as follows: 

Given a function / : (0..N— 1) — > {0, 1} that is zero everywhere except for one argument 
xq, where f(x ) — 1, find that argument xo- 

The algorithm makes use of the mean of a superposition S, written S, where 

b - N ■ 

The algorithm is represented in the programming language of the probabilistic wp-calculus in 
Fig. 0. The initialisation of this algorithm sets the system S up in an equal superposition of all 
possible basis states. Successive iterations of the loop then serve to increase the amplitude of the 
search argument Xo while decreasing the amplitude of the other arguments. To see why this is 
so, consider the case of N = 8. The initialisation sets S up in an equal superposition of the eight 
possible states, represented diagrammatically as follows: 
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S := (Xi | < i < N- ; Init 
do C times 

S := (A* | < i < N ■ S(i) - 2.f(i).S(i) ) ; 

_ Body 
S := (At | 0<i < N ■ 2.S — S(i) ) 

od ; 

S := \i) @ \S(i)\\ 2 , 0<i<N Measure 
Figure 1: Grover's search algorithm. 



1 2 3 4 5 6 7 



The first step of the loop body replaces each S(i) with S(i) — 2.f(i).S(i). This inverts S(i) 
about the origin in the case that f(i) — 1 and leaves S(i) unchanged in the case that f(i) = 0. 
Assuming that /(4) = 1, this replaces our example superposition with 

- - ■ — ■ - -Average 



The second step of the loop body inverts each amplitude about the average of all the ampli- 
tudes resulting in: 



T T T T I 1 1 1 

The amplitude of state |4) has increased as a result of the two steps of the loop body, while 
the amplitude of the others has decreased. 

After an optimum number of iterations, C, the amplitude of \xq) approaches 1 while the 
amplitude of the other states approaches 0. An observation is then performed. Since the amplitude 
of |sco) approaches 1, the probability of the observation yielding |xo) is close to 1. C depends on 
the number of states N and, as discussed in the next section, it is 0(y/~N). 



5 Probabilistic wp 

In two-valued logic, a predicate may be modelled as a function from some state space to the set 
{0, 1}. For example, the predicate x > y evaluates to 1 in a state in which x is greater then y and 
evaluates to in any other state. A probabilistic predicate generalises the range to the continuous 



space between and 1 [Morgan et al., 1996 . For example, the probabilistic predicate 0.5 x (x > y) 
evaluates to 0.5 in a state in which x is greater then y and evaluates to in any other state. 

In the standard wp-calculus, the semantics of imperative programs is given using weakest- 
precondition formulae: for program prog and postcondition post, wp(prog,post) represents the 
weakest precondition (or maximal set of initial states) from which prog is guaranteed to terminate 
and result in a state satisfying post. 
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The wp rule for assignment is given by: 

wp( x := E, post ) = post[x / E]. (1) 

Here, post[x/E] represents predicate post with all free occurrences of x replaced by E. For example, 

wp(x := 7, x > y) — x > y [x/7] 
= 7>y. 

That is, the assignment x := 7 is guaranteed to establish x > y provided 7 > y initially. 
The wp rule for sequential composition is given by: 

wp( prog\\prog1, post ) = wp( progl, wp(prog2, post ) ). (2) 

Both of these rules also apply in the probabilistic wp-calculus. The wp rule for simple proba- 
bilistic assignment Morgan ct al., 199(| is given by: 

wp( x := E @ p, F @ 1- p , post ) = 

p x post[x/E] + (1 - p) x post[x/F], (3) 

In the case of non-probabilistic post, wp{prog , post) represents the probability that program 
prog establishes post. For example 

wp( coin := head @ 0.5, tail @ 0.5, coin = head ) 

by® 

0.5 x (coin = head [coin/head]) + 0.5 x (coin = head [coin/tail]) 
= substitution 

0.5 x (head — head) + 0.5 x (tail = head) 
= 0.5 x 1 + 0.5 x 
= 0.5. 

That is, a coin flip establishes coin = head with probability 0.5. 

The wp rule for the generalised probabilistic assignment is given by: 

N-l 

wp( x := Ei @ p t , < i < N, post ) = V" p t x post[x/Ej\. (4) 

i=0 

The only other programming construct we need in order to model Grover's algorithm is the 
DO-loop. Since the algorithm only loops a constant and finite number of times, we can model 
do C times prog od as a finite sequential composition of C copies of prog which we write as 
prog c . We have that 

prog — skip (5) 
prog l+1 = prog ; prog 1 . (6) 

Here, skip is the statement that does nothing, with wp(skip,post) — post. The semantics of more 
general looping constructs is given by least fixed points in the usual way, but we do not need that 
here. 



6 Reasoning about Grover 

The postcondition we are interested in for the Grover algorithm is that the correct solution is found, 
i.e., S* = \xq). The probability that Grover establishes S = \xq) is given by wp( Grover, S = \xq) ), 
so we shall calculate this. 
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The Grover algorithm has the following structure: 

Init ; 

do C times 

Body 
od ; 

Measure. 



which we shorten to 



Init ; Body c ; Measure. 



When calculating a formula of the form wp( prog\;prog2, post ), we first calculate 
wp( prog2, post ) and then apply wp( progl,-) to the result of this. Thus, to calculate 
wp{ Grover, S = |a;o) ), we first calculate wp{ Measure, S = |a;o) ) : 

wp{ Measure, S = \xq) ) 
= wp( S:=\i) @ \\S(i)\\ 2 , 0<i<N, S=\x )) 
by (4) 

£ \\S(i)\\ 2 x = \x )) 

i=0 

= since = \xq)) is for i ^ xq 

\\S(x Q )\\ 2 . (7) 

Next we calculate wp{ Body c , IS^rco)! 2 )• Body c is defined recursively by (||) and so 
we shall develop recursive equations for wp( Body c , \\S(xo)\\ 2 ). First we look at the weakest 
precondition of a single iteration. Let P[S] stand for a predicate P containing one or more free 
occurrences of variable S and P\S'} stand for P with all free occurrences of S replaced by S' . It 
is easy to show, using (|j) and (||), that 

wp( Body, P[S] ) = P[S'} (8) 

where S'(i) = 2.S - —.S{x ) + (2./(i) - l).S(i). 

From (^), we have that 

2 \ _ II a' f„ M|2 



wp( Body, \\S(x )f ) = |5'(a;o)| 

= ||2.5- ^.S(x ) + (2.f(x ) - l).S(x )\\ 2 

= \\2.S + (l-±).S(xo)\\ 2 . 

Now this has the form || A.S + B.S(xq) \\ 2 and using (||) we can again show that for any values 
A,B: 

wp{ Body, I AH + B.S{x ) \\ 2 ) = || A'.S + B'.S(x ) \\ 2 (9) 

where A' = A + 2.B 

N.B- 2.A-A.B 

B = 



N 

This recurring structure suggests that we define Ai and Bi as follows: 



A l+1 = Ai + 2.Bi (10) 

N.B t - 2. A, - A.B, , . 

B l+ i = -, (11) 
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to give 

wp( Body, I + Bi.S(x ) || 2 ) = || A i+1 .S + B i+l .S(x ) || 2 . (12) 

By induction over j, we get 

w P ( Body 3 , I A.S + B t .S{x Q ) f ) = \\ A i+j .S + B i+j .S{x ) || 2 . (13) 
We take Aq = and Bq — 1 and apply Body to (|?]) as follows: 

W p( Body c , \\S(x )\\ 2 ) 
= since A = 0, B = 1 

wp( Body c , I A .S + So.S(zo) || 2 ) 

by @ 
I A C .S + S c .^(x ) I 2 . 
Finally, we apply the initialisation to this: 

wp( Init, I A C ^S + B c .S(x ) || 2 ) 

1 1 „9 

= A c .— + S c .— 2 

I ^4c + || 2 
N 

Thus we have shown that: 

wp( Grover, S = \xq) ) = 



A c + B c 



N 

That is, the probability, P(C,N), of observing the correct value after C iterations is: 

P(C,N) = 11 Ac+ N Bc " 2 . 

Now using standard mathematical analysis techniques, we can derive the following closed form 
for P(C, N): 

P{C,N) = sm 2 ((2.C+l).9 N ) 
where 9^ — arcsin . 



This is the same as the formula presented in [ Boyer et al., 1998 . The derivation of this closed 
form is outlined in the appendix. 

It is interesting to note that P(C, N) is periodic in C. This can be seen clearly in Fig. || which 
graphs P(C, N) against C for N = 128. Here, an optimum probability of success is reached after 
eight iterations, where P(8, 128) = 0.996. After eight iterations, the probability starts to decrease 
again. The reason for the decrease is that, after eight iterations, the average immediately after 
the inversion about the origin operation goes below zero. 

We wish to determine the optimum number of iterations for a given N. P reaches a maximum 
(and a minimum) for a given TV when: 

±P( Xl N) = 0. 
It is easy to show that the first maximum for a given TV is reached at 

where 9n = arcsin 



4-0N 2 VTV 



We call this H(N). Thus the number of iterations in the Grover algorithm for a search space of 
size TV should be the closest whole number to iff (TV). In Fig. [|, we graph H(N) and indicate that 
it is O(VTV). 
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Figure 2: Probability for Grover search with N = 128. 




H — I 1 1 1 — I — I 1 1 1 — I — I 1 1 1 — I — I 1 1 1 — I — I — I 



50 100 150 200 250 

Size of search space (N) in 1000's — 



Figure 3: Optimum number of iterations versus search space size. 



7 Conclusions 

We have shown how Grover's search algorithm may be represented in the programming notation 
of the probabilistic wp-calculus. Any quantum computation consists of unitary transformations 
and probabilistic measurement and these can be modelled in this notation. Thus any quantum 
algorithm may be modelled in the notation. We believe that this language provides a more rigorous 
and elegant means of describing quantum algorithms than is normally used in the literature. 

We have also shown how the rules of the probabilistic wp-calculus may be used to derive a 
recursive formula for the probability that Grover's algorithm finds the required solution. Using 
standard mathematical techniques, we were then able to then find a closed form for this probability 



which corresponds to the formula presented in [Boyer et al., 1996]. The wp-calculus provides a 



clear and systematic means of stating the required outcome and of deriving the probability of 
achieving it. Of course, it does not provide everything for free as we still had to use intelligence 
in recognising the recurring structure and in finding a closed form. 

In the case of Grover, we were able to derive an exact probability for success because the 
algorithm iterates a fixed number of times. Some algorithms iterate until some condition is met 
rather a fixed number of times. One such example is a generalisation of Grover's presented in 



[Boyer ct al., 1998 which deals with the situation where there are an unknown number of values 
x satisfying f(x) = 1. In a case like this, we need to find the expected number of iterations rather 
than the probability of success. For future work, we intend to look at how these cases may be 
reasoned about using the probabilistic tup-calculus. 



A Deriving a Closed Form 

We outline the derivation of the closed form expression for the probability of success of Grover's 
algorithm. The probability P(C,N) is expressed in terms of the series Ai and Bi, which in turn 
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are defined by the recurrence equations ([To]) and ( |li"| ) . To find a closed form for these recurrences 



we first compute the generating functions for A4 and Bi using basic techniques Kmrth, 1973, Sect. 
1.2.9]: 

2Ni N -Ni 

A, = — — — — — - — — r a 



N + 2{2- N)i + Ni 2 N + 2(2- N)i + Ni 2 ' 

Computing the probability involves the sum Ai + Bi and it seems reasonable to examine the 
Taylor series expansion of the sum of the two generating functions. Assume that z is such that 
the Taylor series expansion of A z + B z converges: 



A z +B z 

N + Nz 
N + 2(2- N)z + Nz 2 
= Taylor expansion 

37V -4 57V 2 - 20iV + 16 9 7N 3 - 56iV 2 + 1127V - 64 , 
1 + ^V- Z + TV 2 Z + ^ Z + - 

We now observe that there is a strong similarity between the coefficients and powers of N in 
the enumerators above and the coefficients and powers of sin((9) in the multiple angle formula for 
sm(n9): 

sin(10) = 1 sin(0) 

sin(30) = 3sin(6») -4sin 3 (6») 

sin(56») = 5sin(6>) - 20sin 3 (6») + 16sin 5 (6») 

sin(76») = 7sin(<9) - 56sin 3 (6») + 112 sin 5 (9) - 64sin 7 (6»). 

This similarity suggests that we express N in the form sin~ 2 (#) since, for example, 
5iV 2 - 20iV + 16, 



N 2 



■[iV/sin- 2 (6»)] = 5-20sin 2 (6» Ar ) + 16sin 4 (6' A r). 



We write 8 as On and choose it so that sin 2 {9n) — N, i.e., On — arcsin— i=. 

Rewriting N as sin~ 2 (On) in A z + B z and re-calculating the Taylor series expansion gives: 




A 

i=0 

Since the Taylor series expansion has the form 

00 

A z + B z = J2( A i + B i) zi > 

we conclude that 

i 

Ai + Bi = 1 + 2^ cos(2j(9jv). 
i=i 

The probability of success P(C, N) is || Ac + Be \\ 2 /N. However, it is easy to see from 
equations (10) and (O) that for any positive naturals C, N, Ac + Be is real and not complex so 
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that I Ac + Be I = {Ac + Be) ■ We then obtain a closed form for the probability: 

P(N,C) = I A c + B c \\ 2 /N 
= (A c + B c ) 2 /N 

V 

l + 2^COs(2j6>jv) /N 

= sin 2 ((2C*+ 1)6 N ). 
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